$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/4af6f342-bf2b-317a-8c6c-9da6e4e46c6b.roa File: 4af6f342-bf2b-317a-8c6c-9da6e4e46c6b.roa (raw, json) Hash identifier: hVLc+rtYnAu88NO08EWyOIuwjyPG/RHcgklPB9LD1VA= Subject key identifier: AA:CC:2E:B4:2E:F3:45:56:49:E8:53:52:09:B1:83:F8:2D:6B:A0:02 Certificate issuer: /CN=60f3bf9e-9df6-4935-a73a-d336655a686b Certificate serial: 010D0C9F4328584BBE4044EF68270916D9CE1080 Authority key identifier: 55:F1:CA:90:E0:7C:D6:55:46:D7:9D:A0:D3:06:9A:17:F6:A3:38:52 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/4af6f342-bf2b-317a-8c6c-9da6e4e46c6b.roa Signing time: Tue 04 Nov 2025 02:00:31 +0000 ROA not before: Tue 04 Nov 2025 02:00:31 +0000 ROA not after: Mon 02 Feb 2026 02:00:31 +0000 asID: 19107 IP address blocks: 68.235.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:40:44:ef:68:27:09:16:d9:ce:10:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60f3bf9e-9df6-4935-a73a-d336655a686b Validity Not Before: Nov 4 02:00:31 2025 GMT Not After : Feb 2 02:00:31 2026 GMT Subject: CN=148c97d7-5659-4d30-8cdf-2584ef7ab8b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d1:91:4b:92:e5:a5:7f:1e:e4:68:ca:4c:f7: 83:f7:66:fd:9c:c5:82:aa:2e:ef:bf:36:2d:14:2a: 20:d6:72:29:a8:84:28:e0:da:0b:fd:ff:43:96:86: 1a:0b:c8:c8:b8:83:9c:f8:4a:ce:d6:cd:02:e4:3b: 6f:b6:8d:bd:6d:0c:33:f2:f3:34:be:18:2e:7b:f4: b5:da:bc:95:53:99:00:8d:a3:56:87:0d:44:d2:53: 30:dd:f3:b6:c1:3d:e7:a8:39:a9:b5:a7:f8:22:9b: ff:db:11:3f:1a:d6:3d:a9:48:0f:df:df:e5:3f:4b: fe:22:36:70:13:0b:70:eb:08:74:54:cd:f4:c5:cc: 2e:32:28:bd:d1:2e:92:56:94:d9:42:ce:ae:74:f3: 85:7e:12:0d:89:f1:9a:79:6e:a4:15:01:c3:80:69: ac:07:8b:d6:84:0c:15:81:cb:ed:fa:e5:ba:b5:61: c0:36:36:cb:9b:bb:e6:05:c2:68:13:0f:a5:10:c6: df:cd:6c:a6:b9:ff:97:49:42:42:58:dc:fb:9b:69: 81:9a:0c:c8:0c:bb:a1:de:39:dc:f6:02:ad:d9:68: 61:90:27:ce:2f:12:cb:09:a9:b9:aa:60:fe:7c:65: 9e:16:19:b8:00:12:a4:42:e4:57:47:39:9b:d8:74: fe:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:CC:2E:B4:2E:F3:45:56:49:E8:53:52:09:B1:83:F8:2D:6B:A0:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/4af6f342-bf2b-317a-8c6c-9da6e4e46c6b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.crl X509v3 Authority Key Identifier: keyid:55:F1:CA:90:E0:7C:D6:55:46:D7:9D:A0:D3:06:9A:17:F6:A3:38:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer sbgp-ipAddrBlock: critical IPv4: 68.235.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:47:94:1e:a8:61:d7:2f:15:f4:4b:d2:5a:45:cf:b7:9f:a4: 6c:e5:6a:7f:c5:a4:66:88:40:26:58:a3:b1:1d:5b:a7:30:9e: 59:4d:7b:58:70:4a:47:71:43:1a:3b:33:c9:9e:f6:c3:27:62: df:64:18:27:be:34:04:3f:88:3d:a2:ef:71:ee:0e:ae:fd:44: 07:56:e9:7e:0c:75:b9:54:29:b8:4d:7f:6a:49:2d:0e:1c:49: 73:9b:e8:91:29:b6:77:bf:d0:9c:9f:b0:bd:46:9f:0c:ed:37: 3e:4e:e0:27:ea:ff:2f:1d:57:db:f9:2b:11:83:30:21:bc:83: 87:05:98:6c:fd:b9:be:9d:33:d7:fa:0f:03:16:78:3f:af:de: 99:96:7f:6d:05:f4:b2:16:00:ef:38:59:ab:fc:7d:28:01:61: b5:aa:ec:8a:3c:1a:cd:eb:d6:35:b2:1d:6b:18:40:d1:81:1b: c2:46:16:25:a5:65:d7:55:90:44:f3:3c:a5:eb:99:b3:26:c8: aa:0e:76:d4:8f:38:7f:88:18:61:c4:fd:ca:c2:fe:0d:e5:de: 2e:7e:ca:78:2e:9d:1a:77:6c:99:fd:22:23:37:69:81:83:1c: 20:a8:92:89:32:82:78:28:b5:ea:d6:d1:e4:2d:e0:86:c1:1f: 80:f0:46:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu+QETvaCcJFtnOEIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjBmM2JmOWUtOWRmNi00OTM1LWE3M2EtZDMzNjY1NWE2 ODZiMB4XDTI1MTEwNDAyMDAzMVoXDTI2MDIwMjAyMDAzMVowLzEtMCsGA1UEAxMk MTQ4Yzk3ZDctNTY1OS00ZDMwLThjZGYtMjU4NGVmN2FiOGI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdGRS5LlpX8e5GjKTPeD92b9nMWCqi7vvzYt FCog1nIpqIQo4NoL/f9DloYaC8jIuIOc+ErO1s0C5Dtvto29bQwz8vM0vhgue/S1 2ryVU5kAjaNWhw1E0lMw3fO2wT3nqDmptaf4Ipv/2xE/GtY9qUgP39/lP0v+IjZw Ewtw6wh0VM30xcwuMii90S6SVpTZQs6udPOFfhINifGaeW6kFQHDgGmsB4vWhAwV gcvt+uW6tWHANjbLm7vmBcJoEw+lEMbfzWymuf+XSUJCWNz7m2mBmgzIDLuh3jnc 9gKt2WhhkCfOLxLLCam5qmD+fGWeFhm4ABKkQuRXRzmb2HT+5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKrMLrQu80VWSehTUgmxg/gta6ACMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82MGYz YmY5ZS05ZGY2LTQ5MzUtYTczYS1kMzM2NjU1YTY4NmIvNGFmNmYzNDItYmYyYi0z MTdhLThjNmMtOWRhNmU0ZTQ2YzZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNjBmM2JmOWUtOWRmNi00OTM1LWE3 M2EtZDMzNjY1NWE2ODZiLzYwZjNiZjllLTlkZjYtNDkzNS1hNzNhLWQzMzY2NTVh Njg2Yi5jcmwwHwYDVR0jBBgwFoAUVfHKkOB81lVG152g0waaF/ajOFIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS82MGYzYmY5ZS05ZGY2LTQ5MzUtYTczYS1kMzM2 NjU1YTY4NmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROsEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFRHlB6oYdcvFfRL0lpFz7efpGzlan/FpGaIQCZYo7EdW6cwnllNe1hw SkdxQxo7M8me9sMnYt9kGCe+NAQ/iD2i73HuDq79RAdW6X4MdblUKbhNf2pJLQ4c SXOb6JEptne/0JyfsL1GnwztNz5O4Cfq/y8dV9v5KxGDMCG8g4cFmGz9ub6dM9f6 DwMWeD+v3pmWf20F9LIWAO84Wav8fSgBYbWq7Io8Gs3r1jWyHWsYQNGBG8JGFiWl ZddVkETzPKXrmbMmyKoOdtSPOH+IGGHE/crC/g3l3i5+yngunRp3bJn9IiM3aYGD HCCokokygngoterW0eQt4IbBH4DwRpo= -----END CERTIFICATE-----Generated at Wed Nov 5 14:57:20 2025 by rpki-client